200 likes | 322 Views
Panel Discussion Regarding IT Issues in Today’s Environment. Agenda. Introductions IT Governance IT Risk Assessment - Translating IT Risks to Business Risks Social Media and Impact on IT Organizations Potpourri IT Security - Job Skills - Technology Trends, Soft Skills, Employer Expectations
E N D
Panel Discussion Regarding IT Issues in Today’s Environment
Agenda • Introductions • IT Governance • IT Risk Assessment - Translating IT Risks to Business Risks • Social Media and Impact on IT Organizations • Potpourri • IT Security - Job Skills - Technology Trends, Soft Skills, Employer Expectations • Other Questions from the Audience 1
Introductions • Facilitator • Jim Enstrom – Senior Manager, Deloitte & Touche • Panelists • Dan Dec, Partner, Fusion Risk Management • Francine Mckenna, Mckenna Partners; Vice President, ISACA Chapter • Paul Nowicki, Audit Manager, CNA • Bernadette McGeary, Federal Reserve Bank 2
Sample IT Maturity model Fusion FrameworkTM Maturity Model Combines CobIT, Carnegie Mellon’s CMMI, Gartner, and others 7
Goal 9
IT Risk Assessment IT Risk Assessment - Translating IT Risks to Business Risks • IT risk = Business Risk • For an IT risk to have an impact on the company, it has to have a business risk associated • Once an IT risk is identified, the next step is to demonstrate the impact 11
IT Risk Assessment IT Risk Assessment - Translating IT Risks to Business Risks • Identify the risks • What is an auditable entity? • What is the universe of auditable entities? • What changes to the business have occurred that might have changed it’s risk profile? • Example, USD to EUR currency issue • Assess the bottom line • If left unmitigated, what is the probability of the expected events and their associated financial impact to the company • If the risk is currently controlled, is it cost effective? Is there a more efficient way to control the risk? 12
IT Risk Assessment IT Risk Assessment - Translating IT Risks to Business Risks • How does CNA conduct an IT Risk Assessment? • Annual Audit Planning process • Requests from the business • External Audit observations • Trends across the industry • What are the main challenges of performing an IT risk assessment in the organization? • Constantly evolving processes and systems • Scheduling / Personnel • What are the top IT risks in your organization today? • Change Management • IT Governance • Data Encryption • Capacity Planning 13
Social Media and the CIO • Francine McKenna • Firm site: www.mckennapartners.com • Blog: www.retheauditors.com • Twitter @retheauditors • Facebook http://www.beingpeterkim.com/2008/09/ive-been-thinki.html �3 Italia. Social networks: Facebook Business and La3 DVB-H groups.80 �Abbott Labs. Social networks: Facebook Labs Are Vital scholarship contest.45 �Absolut Vodka:◦Online video: ABSOLUTworld.20◦Social networks: Top Bartender page on Facebook.56 �Accenture:◦Blogging: Nine corporate blogs.19◦Podcasting: Five corporate podcasts. �Accuquote:◦Blogging: Life Insurance blog.19◦Podcasting: Life Insurance podcast. �Acura:◦Social networks: Facebook Acura TSX Connect fan page.◦Widgets: Acura RDX Traffic on Yahoo. 15
Social Media and the CIO �Acuvue. Social networks: Facebook "Wink" application.3 �Addison Avenue. Crowdsourcing: Suggestion box.73 �Adidas. Social networks: adidas soccer on myspace; 70% of ROI driven by pass-along, aka "never-ending friending.” �Adobe.Tagging: Delicious account used to bookmark primarily tutorials.2 �Airplay. Social networks: Baseball Gameday Challenge Facebook application.56 �Alltop:98◦Content aggregation: By topic.◦Online video: Alltop tutorial on YouTube.◦Widgets: The Alltop widget. �Amazon:◦Social networks: Shelfari.70◦Blogging: Web Services blog.19 �AMC's Mad Men. Microblogging: Fake Twitter accounts. �American Express. Blogging: OPEN Forum.67 �American Legacy Foundation. Social Networks: MySpace, Bebo, hi5, xanga, Facebook, and Ning pages.94 �American Red Cross. Blogging: Red Cross Chat.19 16
Social Media and the CIO �Animal Planet. Widgets: Killer Clips widget on Yahoo. �Annie's Homegrown. Blogging: Bernie's Blog (offline).4 �AOL. Blogging: Vincent Ferrari tries to cancel his account.1 �Apple:◦Blogging: iPod's dirty little secret.1◦Social networks: Apple Students group on Facebook. �ArcelorMittal. Virtual worlds: Second Life presence.3 �Artful Home. Social networks: Community site.77 �AT&T:30◦Microblogging: ATTNews, ATTblueroom, and OnwardSmallBiz on Twitter.◦Online video: Share AT&T channel on YouTube.◦Photosharing: Flickr photostream.◦Social networks: Facebook fan page. �Austin Ventures. Social networks: Facebook page �Avaya. Blogging: The Contact Center Insights Blog.19 �Avis. Blogging: We Try Harder.41 �Avon:34◦Social media press release: Avon Breast Cancer Crusade.◦Social networks: Canada Breast Cancer Crusade on Facebook. 17
Potpourri • IT Security - Job Skills - Technology Trends, Soft Skills, Employer Expectations • Questions from the Audience 19